[Samba] Help with domain share 4.22.x

[Bruno Kammers Ribeiro]

Is there any way to force samba fileserver always insert DOMAIN, for
non-domain users can access only with user?

smb.conf of fileserver:

[global]
log file = /var/log/samba/log.%m
log level = 3 passdb:5 auth:5
logging = file
map to guest = Bad User
netbios name = NAS
panic action = /usr/share/samba/panic-action %d
password server = ad.domain.local
realm = DOMAIN.LOCAL
security = ads
server max protocol = SMB3
server min protocol = NT1
server string = %h server
workgroup = DOMAIN
idmap_ldb:use rfc2307 = yes
idmap config * : backend = tdb
idmap config * : range = 10000-199999
idmap config DOMAIN : backend = rid
idmap config DOMAIN : range = 1000000-19999999
winbind enum users = yes
winbind enum groups = yes
winbind use default domain = yes

Em sex., 18 de set. de 2026 às 10:43, Bruno Kammers Ribeiro <
bkammers at gmail.com> escreveu:

> I have a Samba AD server and a Samba member server acting as a file server.
>
> It is working, but clients always have to type `DOMAIN\user` or
> `user at DOMAIN` to access the share.
>
> The Samba file server configuration already includes the directive
> `winbind use default domain = yes`.
>
> I would like to access the share using just the username, without having
> to specify the domain.
>
> The client machines are not part of the domain.
>
> Is there a workaround for this?
>